24.01.2026

CSO Online 23.01.2026 22:14
Fortinet has confirmed that a new attack campaign observed recently against customer devices is exploiting an unpatched issue to bypass authentication. The new attacks are different from a previous campaign seen in December that targeted two vulnerabilities related to FortiCloud single sign-on (SSO) authentication.
“Recently, a small number of customers reported unexpected login activity occurring on their devices, which appeared very similar to the previous issue,” the Fortinet product security team said in a blog post. “However, in the last 24 hours, we have identified a number of cases where the exploit was to a device that had been fully upgraded to the latest release at the time of the attack, which suggested a new attack path.”

CSO Online 23.01.2026 19:00
Cybercriminals have built structured criminal groups with an organizational model similar to that of a legitimate business. “Cybercrime has become industrialized, a return on investment (ROI)-oriented economy, focused on speed and monetization,” according to Martin Zugec, Bitdefender’s director of technical solutions.
Zugec explains that this modus operandi of cybercriminal groups is characterized by a high degree of specialization, which includes initial access brokers or ransomware-as-a-service (RaaS) affiliates. “Today, sophistication is not measured by the complexity of the tools, but by the simplicity and speed of the execution chain,” says Zugec.

Heise Security 23.01.2026 14:28
Eine Studie zeigt: KIs können komplexe Zero-Day-Exploits erstellen. Die Folge: Die Suche nach Sicherheitslücken wird erfolgreich industrialisiert und skaliert.

Heise Security 23.01.2026 12:00
Die Softwareentwicklungsumgebung GitLab ist über mehrere Sicherheitslücken attackierbar.

Golem 23.01.2026 10:00
Bei der Pwn2Own Automotive in Tokio wurden mit 76 verschiedenen Zero-Day-Lücken mehrere E-Auto-Lader und Infotainmentsysteme gehackt. (Sicherheitslücke, Elektroauto)

Heise Security 23.01.2026 08:55
Samsung liefert ein Software-Update für die Wi-Fi-Variante der Galaxy Watch 5 aus. Es enthält den Sicherheitspatch von Januar 2026.

Heise Security 23.01.2026 08:41
Ein Sicherheitsupdate schließt eine kritische Schwachstelle in Zoom Node.

Golem 23.01.2026 08:04
Auf Zigtausenden deutschen Servern läuft eine nicht mehr unterstützte Exchange-Version. Die Zahlen bessern sich zwar, bleiben aber bedenklich hoch. (Exchange, Microsoft)